d2780189e0c285d6da2baa4c4d7435e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2780189e0c285d6da2baa4c4d7435e0_JaffaCakes118
Size

144KB
MD5

d2780189e0c285d6da2baa4c4d7435e0
SHA1

9265c485269fec389874f083d1a1162fbc5ec172
SHA256

206f5e4495d6101d654f0148c57d2bbc74144677ea14d9233171b22cb14177d4
SHA512

acfc2ed9f1c7c19395aa5455d9f3761f1c77183c2e945261284fb449ed40384179a5c2f0ac7be5c031a709a56d62fa10aa42212e42529739e29791770fb6f794
SSDEEP

3072:11WvAc8k/8lZp2d0JXbp82GxLATb9hlZMtBIy:1gvA1kuz2XYJhla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2780189e0c285d6da2baa4c4d7435e0_JaffaCakes118

Files

d2780189e0c285d6da2baa4c4d7435e0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

jSta
jStb

Sections

CODE
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ